Set Administrator Password
Administrator Tool Settings
Administrator Packages for Windows 2000* and Windows XP*
Administrator Profiles
Application Settings
Adapter Settings
Software
EAP-FAST A-ID Groups
Administrator Tasks
The Administrator Tool is used by the person who has administrator privileges on this computer. This tool is used to configure common (shared) profiles, Pre-logon/Common profiles, and Persistent Connection profiles. The Administrator Tool can also be used by an Information Technology department to configure user settings within the Intel(R) PROSet/Wireless software and to create custom install packages to export to other systems.
The Administrator Tool is located on the Intel(R) PROSet/Wireless Tools menu. It must be selected during a Custom installation of the Intel(R) PROSet/Wireless software or the feature is not displayed in the Tools menu.
Users cannot modify Administrator settings or profiles unless they have the password for this tool. When you first access the Administrator Tool, you are required to enter a password. The password must not exceed 100 characters (although the field will only display up to 56 characters). Null passwords are not allowed.
NOTE: If you do not know the original password, there is no process available to reset the password.
To change the existing password:

An Administrator can determine that order that Administrator profiles are placed in the Administrator Tool's Profiles list.
An Administrator Package is a self-extracting executable file that generally contains the Intel(R) PROSet/Wireless software, administrative profiles, and other settings. You can copy or send an administrative package to clients on your network. When the executable runs, the contents are installed and configured on the destination computer. If a profile is part of the package, the profile governs how the destination computer connects to a specific wireless network. For information about profiles, see Profiles.
NOTE: To create and export a package for a computer running on Microsoft Windows Vista*, you need to create the package on a computer running Windows Vista. You cannot create a package for Windows Vista on a computer running Microsoft Windows XP*.

Name Description Create a Windows XP or Windows 2000 package
Create a package that can be exported to a user's computer that has either Microsoft Windows XP* or Windows 2000* operating system. This package allows export of all 802.1X authentication EAP-type Pre-logon/Common and Persistent profiles.
Create a Windows Vista package
Not Available. To create and export a package for a computer running on Microsoft Windows Vista*, you need to create the package on a computer running Windows Vista. You cannot create a package for Windows Vista on a computer running Microsoft Windows XP*.
Open an existing package
Select to browse for and open an existing package.
Name Description Profiles Click Include Profiles in this package. Profiles can be shared with other users. Click Include Application Settings in this package. Specify application settings to be enabled.
Click Include Adapter Settings in this package. Specify initial values for adapter settings used on this computer.
Click Include Software in this package. Define which software components are installed on this computer.
NOTE: See Software for information to reduce the size of the Administrator Package executable file.
Click Include A-ID Groups. Add A-ID Group to support multiple PACs from multiple A-IDs.
NOTE: You can also select Save Package on the File menu to save the package.
NOTE: You can also select Open Package on the File menu to edit an Administrator Package.
Administrator Profiles are owned and managed by the network administrator or the administrator of this computer. These profiles are common or shared by all users on this computer. However, end users cannot modify these profiles. They can only be modified from the Administrator Tool, which is password protected.
There are two types of Administrator Profiles: Persistent and Pre-logon/Common. You can also configure Voice over IP (VoIP) settings for export to a soft-phone application.

Persistent profiles are applied at boot time or whenever no one is logged on the computer. After a user logs off, a Persistent profile maintains a wireless connection either until the computer is turned off or a different user logs on.
Persistent profile key points:
NOTE: Intel(R) PROSet/Wireless supports machine certificates. However, they are not displayed in the certificate listings.
To create a Persistent profile:
Pre-logon/Common profiles are applied prior to a user log on. If Single Sign On support is installed, the connection is made prior to the Windows log-on sequence (Pre-logon/Common).
If Single Sign On support is not installed, the profile is applied once the user session is active. Pre-logon/Common profiles always appear at the top of the Profiles list. Users can still prioritize profiles that they have created but they cannot reprioritize Pre-logon/Common profiles. Because these profiles appear at the top of the Profiles list, Intel(R) PROSet/Wireless automatically attempts to connect to the Administrator profiles first before any user-created profiles.
NOTE: Only administrators can create or export Pre-logon/Common profiles.
Pre-logon Connect key points are:
Pre-logon/Common profiles support is installed during a Custom install of the Intel(R) PROSet/Wireless software. See Install or Uninstall the Single Sign On Feature for more information.
NOTE: If the Single Sign On or Pre-logon Connect features are not installed, an administrator is still able to create Pre-logon/Common profiles for export to a user's computer.
The following describes how the Pre-logon Connect feature functions from system power-up. The assumption is that a saved profile exists. This saved profile has valid security settings marked with "Use Windows Logon user name and password" that are applied at the time of Windows log on.
NOTE: A user certificate can only be accessed by a user that has been authenticated on the computer. Therefore, a user should log onto the computer once (using either a wired connection, alternate profile or local log in) before using a Pre-logon/Common profile that authenticates with a user certificate.
When you log off, any wireless connection is disconnected and a persistent profile (if one is available) is applied. Under certain circumstances, it is desirable to maintain the current connection (for example, if user-specific data needs to be uploaded to the server post-log off or when roaming profiles are used).
Create a profile that is marked as both Pre-logon/Common and persistent to achieve this functionality. If such a profile is active when the user logs off, the connection is maintained.
To create a Pre-logon/Common Profile:
NOTE: If a Persistent connection was already established, a Pre-logon/Common profile is ignored unless the profile is configured with both Pre-logon/Common and Persistent connection options.
Administrators can designate networks to be excluded from connection. Once a network is excluded, only an administrator can remove the network from the Exclude list. The excluded network is displayed in the Intel(R) PROSet/Wireless Exclude List Management.
To exclude a network:

To remove a network from exclusion:
Intel(R) PROSet/Wireless software supports VoIP third-party soft-phone applications. Third-party VoIP applications support voice codecs. Codecs generally provide a compression capability to save network bandwidth. Intel(R) PROSet/Wireless software supports the following International Telecommunications Union (ITU) codec standards:
Codec
Algorithm
ITU G.711
PCM (Pulse Code Modulation)
ITU G.722
SBADPCM (Sub-Band Adaptive Differential Pulse Code Modulation)
ITU G.723
Multi-rate Coder
ITU G.726
ADPCM (Adaptive Differential Pulse Code Modulation)
ITU G.727
Variable-Rate ADPCM
ITU G.728
LD-CELP (Low-Delay Code Excited Linear Prediction)
ITU G.729
CS-ACELP (Conjugate Structure Algebraic-Code Excited Linear Prediction)
An administrator can export VoIP settings to configure various codec data rates and frame rates to improve voice quality in VoIP transmissions.
To configure VoIP settings:
NOTE: Ensure Voice over IP is not disabled in the Administrator Tool Application Settings. It is enabled by default.
G711 has 10ms frame rate with 64kbps bit rate
G722 has 10ms frame rate with 64kbps bit rate
G723 has 30ms frame rate with either 5.3kbps or 6.4kbps bit rate
G726-32 has 10ms frame rate with 32kbps bit rate
G728 has 2.5ms frame rate with 16kbps bit rate
G729 has 10ms frame rate with 10kbps bit rateSelect parameters from the drop down menus.
Codec Usage Frame Rate
- G711_64kbps
- G722_64kbps
- G722_56kbps
- G722_48kbps
- G722_1_32kbps
- G722_1_24kbps
- G722_1_16kbps
- G726_16kbps
- G726_24kbps
- G726_32kbps
- G726_40kbps
- G728_16kbps
- G729a_8kbps
- G729e_11_8kbps
- GIPS_iPCM_VARIABLE
- G722_2_VARIABLE
- Interactive Voice
- Audio Conference
- Voice Data
- Video
- Streaming Audio
- 20
- 30
An administrator can configure the Intel(R) PROSet/Wireless Application Settings to control how the application behaves on the user's computer, and to select what level of control users have over various aspects of their wireless connections.
To configure Application Settings:
|
Name |
Description |
|---|---|
|
802.1X Authentication |
Enable a user to create or connect to profiles that support different 802.1X authentication EAP types. Select which 802.1X authentication EAP types you want enabled on a user's computer: EAP SIM, EAP LEAP, EAP TLS, EAP TTLS, EAP PEAP, EAP FAST. |
| AAA In Control | Notify when another application uses the wireless adapter. |
| Adapter Switching | When enabled, whenever Windows XP* or Windows 2000* detects a valid wired Ethernet connection, Intel(R) PROSet/Wireless will automatically close any wireless network connections and turn off the wireless radio. Also, if the system looses its wired Ethernet connection, Intel(R) PROSet/Wireless will automatically turn on the wireless adapter radio and attempt to connect to the last connected profile. If the last connected network is not available, Intel(R) PROSet/Wireless will attempt to connect to the first available wireless network based on the preferred Profile List. NOTE: This behavior is for the system as a whole and is not specific to any user. NOTE: If the user has manually turned off the wireless radio, the radio will not turn on again when an wired Ethernet connection is lost. The user must turn the radio back on for wireless connections to be established. |
|
Administrator Tool |
Disable access to the Administrator Tool on a user's computer. |
|
Application Auto Launch |
Select to start a batch file, executable file, or script automatically when a specific profile connects to the network. For example, start a Virtual Private Network (VPN) session automatically whenever a user connects to a wireless network. |
|
Application On Radio Toggle |
Enables a third-party application to disable the Intel(R) PROSet/Wireless Wireless On or Wireless Off switch. |
| CCXv4 |
Select Enable CCXv4 to Enable Cisco Compatible Extensions, version 4 (CCXv4) features for EAP-FAST profiles. NOTE: The EAP-FAST Authority Identifier (A-ID) Groups feature in the Administrator Tool is unavailable if CCXv4 is not enabled. Select which of the following prompts to enable or disable on a user's computer for EAP-FAST PAC provisioning: Turn off prompts and warnings for unauthenticated provisioning: Option to turn off prompts and warnings for PAC auto-provisioning if there is no PAC or there is no PAC that matches the A-ID sent by the server that it is connected to. Turn off prompts when switching default server (A-ID): Option to turn off prompts when a client encounters a server that has provisioned a PAC before but is not currently selected as the default server. Turn off unauthenticated provisioning after PAC is provisioned: Option to turn off auto-provisioning automatically after a PAC for that A-ID has been provisioned. NOTE: The above feature is not installed through an Administrator Package when a user's computer has an Intel(R) PRO/Wireless 2915ABG Network Connection or an Intel(R) PRO/Wireless 2200BG Network Connection. |
|
Cache Credentials |
Select to save credentials after a user logs on. If the wireless connection temporarily disconnects, the saved credentials are used upon reconnection. The credentials are cleared when the user logs off. NOTE: If cleared, the Prompt each time I connect option is unavailable when creating profiles. |
|
Device to Device (ad hoc) |
Enable or disable whether a user is able to either create Device to Device (ad hoc) profiles or join Device to Device (ad hoc) networks. Select one of the following to enable or disable whether the user can connect to device to device networks:
Select to either allow a user to configure profiles with Device to Device (ad hoc) settings or prevent configuration of Device to Device (ad hoc) profiles.
To remove the Device to Device (ad hoc) operating mode from the wireless profile General Settings, select both Disable device to device networking and Hide device to device application settings. This prevents a user from creating profiles that support Device to Device (ad hoc) network. |
|
Import and Export |
Select to import to or export profiles from a user's computer. Enable permits auto import of user profiles when copied to an auto import folder. |
| Maintain Connection |
Select to hide the Maintain Connection option in the Create Wireless Profile Advanced Settings. The Maintain Connection option maintains the wireless connection with a user profile after log off. NOTE: The Maintain Connection option may be used with Nortel VPN client when it is configured to Logoff on Connect. |
| Maintain SmartCard Connection | Select to maintain the connection if the smart card is removed while the wireless device is connected to a network that uses smart card credentials. The default behavior for Intel(R) PROSet/Wireless is to close the connection that uses smart card credentials if the smart card is removed. Turning this feature On will cause the connection to remain connected (unless re-authentication is required for another reason). |
|
Message On Radio Toggle |
Enables a third-party application to notify a user that the Intel(R) PROSet/Wireless Wireless On or Wireless Off switch is disabled. |
|
Microsoft Windows XP Coexistence |
Select Enable Microsoft Wireless Zero Configuration and Intel PROSet/Wireless to coexist on this system. Enable this option to allow Microsoft Wireless Zero Configuration and Intel(R) PROSet/Wireless to exist together on this system. When you select this option, you prevent Microsoft Windows XP Wireless Zero Configuration Service from being disabled when Intel(R) PROSet/Wireless is enabled. |
| Persistent Connection |
Select Ensure that persistent connection and computer policies are updated prior to user log on. NOTE: Updating policies may delay the log on screen for up to 2 minutes. |
| Pre-logon Cisco Mode |
Enable Cisco Mode during a Pre-logon/Common connection. Cisco access points have the capability to support multiple wireless network names (SSIDs) but only broadcast one. In order to connect to such an access point, an attempt is made to connect with each profile. This is referred to as Cisco Mode. NOTE: The Pre-logon/Common connection may increase the connection time. |
|
Profile Connectivity |
Control profile connection by the user. Disable user-profile switching. Leaving this setting Off lets the user connect to both user and administrator profiles. By turning this setting On, the user can only connect to administrator profiles. The administrator also chooses which administrator profiles are available to the user, as follows:
|
|
Security Level |
Select the security level on a user's computer. Users are able to connect to profiles only with this security level. Clicking this checkbox enables the following control to be turned on or off.
|
| Shared Folder Notification | Select the shared folder notification setting on a user's computer.
|
| Single Sign On |
Select which Administrator Profile types are enabled on a user computer.
|
|
Support Information |
Specify the support information displayed in the About box of the Intel(R) PROSet/Wireless Software.
|
|
Enables third-party software to use the VoIP application on a user's computer. The default setting enables this feature. NOTE: This feature is not installed through an Administrator Package when a user's computer has an Intel(R) PRO/Wireless 2915ABG Network Connection or an Intel(R) PRO/Wireless 2200BG Network Connection. |
|
|
Wi-Fi* Manager |
Select which Wi-Fi* manager controls a user's wireless connections. Use either the previous logged on user's Wi-Fi manager or allow each user to select their preferred Wi-Fi manager.
|
| Wi-Fi Protected Setup* | Intel(R) PROSet/Wireless software can be configured to operate as a registrar for a Wi-Fi Protected Setup* supported access points. The registrar securely transfers the access point key or password automatically or manually with a USB flash drive or other external device.
Select to enable Intel(R) PROSet/Wireless to register other devices. Also select to hide the Enable Device Registration setting in the Intel(R) PROSet/Wireless Application Settings to block the user from changing these settings. NOTE: This setting is not applicable for an Intel(R) PRO/Wireless 2915ABG Network Connection or an Intel(R) PRO/Wireless 2200BG Network Connection. |
| Wireless Event Viewer Settings |
Select where to save the Intel Wireless Troubleshooter Wireless Event Log Viewer log file.
If you want the log file copied to an archive site after a specific number of days:
|
|
Control the wireless radio.
Once this feature is installed on a user's computer, follow the instructions below to turn on or off the 802.11a radio control. To turn off the 802.11a radio:
To turn on the 802.11a radio:
NOTE: The option Add 802.11a Radio On/Off selection is available only for wireless adapters that support 802.11a, 802.11b and 802.11g. This feature is not installed through an Administrator Package when a user's computer has an Intel(R) PRO/Wireless 2200BG Network Connection. |
|
|
Close |
Closes the Administrator Tool. |
|
Help? |
Provides help information for this page. |
To configure Adapter Settings:
|
Name |
Description |
|---|---|
|
802.11n Channel Width |
Set high throughput channel width to maximize performance. Set the channel width to Auto or 20Mhz. Auto is the default setting. If you select No change, then this setting will not be changed at the user's computer. NOTE: This setting is available only if the adapter is an Intel(R) Wireless WiFi Link 4965AGN. |
|
802.11n Mode |
The 802.11n standard builds upon previous 802.11 standards by adding multiple-input multiple-output (MIMO). MIMO increases data throughput to improve transfer rate. Select Enabled or Disabled to set the 802.11n mode of the adapter. Enabled is the default setting. If you select No change, then this setting will not be changed at the user's computer. NOTE: This setting is available only if the adapter is an Intel(R) Wireless WiFi Link 4965AGN. NOTE: To achieve transfer rates greater than 54 Mbps on 802.11n connections, WPA2*-AES security must be selected. No security (None) can be selected to enable network setup and troubleshooting. An administrator can enable or disable support for high throughput mode to reduce power-consumption or conflicts with other bands or compatibility issues. |
|
Ad Hoc Channel |
There is no need to change the channel unless the other computers in the Device to Device (ad hoc) network use a different channel from the default channel. Value: Select the allowed operating channel from the list.
If you select No change, then this setting will not be changed at the user's computer. |
|
Ad Hoc Power Management |
Set power saving features for Device to Device (ad hoc) networks.
If you select No change, then this setting will not be changed at the user's computer. NOTE: This feature is not installed through an Administrator Package when a user's computer has an Intel(R) PRO/Wireless 2915ABG Network Connection or an Intel(R) PRO/Wireless 2200BG Network Connection. |
|
Ad Hoc QoS Mode |
Quality of Service (QoS) control in ad hoc networks. QoS provides prioritization of traffic from the access point over a wireless LAN based on traffic classification. WMM* (Wi-Fi Multimedia*) is the QoS certification of the Wi-Fi Alliance*. When WMM is enabled, the adapter uses WMM to support priority tagging and queuing capabilities for Wi-Fi networks.
NOTE: This feature is not installed through an Administrator Package when a user's computer has an Intel(R) PRO/Wireless 2915ABG Network Connection or an Intel(R) PRO/Wireless 2200BG Network Connection. |
| Fat Channel Intolerant | This setting communicates to surrounding networks that this wireless adapter is not tolerant of 40MHz channels in the 2.4GHz band. The default setting is for this to be turned off (disabled), so that the adapter does not send this notification. NOTE: This setting is available only if the adapter is an Intel(R) Wireless WiFi Link 4965AGN. |
| HD Mode | In a wireless network environment where several access points are nearby, this feature will reduce interference and improve your wireless connection. The default setting is for this to be turned off (disabled). NOTE: This setting is available only if the adapter is an Intel(R) Wireless WiFi Link 4965AGN. |
|
Mixed Mode Protection |
Use to avoid data collisions in a mixed 802.11b and 802.11g environment. Request to Send/Clear to Send (RTS/CTS) should be used in an environment where clients may not hear each other. CTS-to-self can be used to gain more throughput in an environment where clients are in close proximity and can hear each other. If you select No change, then this setting will not be changed at the user's computer. |
|
Power Management |
Power Management: Lets you select a balance between power consumption and adapter performance. Select a balance between power consumption and adapter performance. Select one of the Power Saving Mode levels:
If you select No change, then this setting will not be changed at the user's computer. NOTE: Power consumption savings vary based on infrastructure settings. |
|
Preamble Mode |
Changes the preamble length setting received by the access point during an initial connection. Always use Auto Tx Preamble to provide optimal network throughput. Auto Tx Preamble allows automatic preamble detection. If supported, short preamble should be used. If not, use Long Tx Preamble. If you select No change, then this setting will not be changed at the user's computer. NOTE: This feature is not installed through an Administrator Package when a user's computer has an Intel(R) PRO/Wireless 3945ABG Network Connection. |
|
Roaming Aggressiveness |
Define how aggressively a wireless client roams to improve connection to an access point. Click Use default value to balance between not roaming and performance or select a value from the list. If you select No change, then this setting will not be changed at the user's computer.
|
|
Throughput Enhancement |
Change the value of the Packet Burst Control.
|
|
Transmit Power |
If you decrease the transmit power, you reduce the radio coverage. Default Setting: Highest power setting Values:
If you select No change, then this setting will not be changed at the user's computer. NOTE: The optimal setting is for a user to always set the transmit power at the lowest possible level still compatible with the quality of their communication. This allows the maximum number of wireless devices to operate in dense areas and reduce interference with other devices that this radio shares radio spectrum with. NOTE: This setting takes effect when either Network (Infrastructure) or Device to Device (ad hoc) mode is used. |
|
Select which band to use for connection to a wireless network:
If you select No change, then this setting will not be changed at the user's computer. NOTE: These wireless modes (modulation types) determine the discovered access points displayed in the Wireless Networks list. |
|
|
Close |
Closes the Administrator Tool. |
|
Help? |
Provides help information for this page. |
Select which Intel(R) PROSet/Wireless software components are installed on a user's computer.
| Name | Description |
|---|---|
|
Wireless LAN adapter driver |
Installs the NDIS driver for the wireless LAN adapter. |
|
Intel PROSet/Wireless |
Select which features to install on a user's computer.
|
To reduce the size of the software files in your Administrator Package:
NOTE: If you create an Administrator Package on a Microsoft Windows XP Professional x64 Edition system, the language files are located in the \XP\Docs and the XP\Apps\x64\iProLang folders.
NOTE: If you plan to use Novell Client* for Windows, it should be installed prior to installation of the Intel(R) PROSet/Wireless software. If Intel(R) PROSet/Wireless is already installed, you should remove it prior to installation of Novell Client for Windows.
NOTE: This feature is unavailable if CCXv4 is not selected in the Administrator Tool Application Settings
An Authority Identifier (A-ID) is the RADIUS server that provisions Protected Access Credential (PACs) A-ID groups. A-ID groups are shared by all users of the computer and allow EAP-FAST profiles to support multiple PACs from multiple A-IDs.
The A-ID groups can be pre-configured by the administrator and set up through an Administrator Package on a user's computer. When a wireless network profile encounters a server with an A-ID within the same group of the A-ID specified in the wireless network profile, it uses this PAC without a prompt to the user.
To add an A-ID Group:
If the A-ID group is locked, then additional A-IDs cannot be added to the group.
To add an A-ID to an A-ID group:
Once an A-ID group has been selected, the A-IDs are extracted from the PACs on the A-ID group server. The list of A-IDs is automatically populated.
If you do not have any certificates for EAP-TLS (TLS) or EAP-TTLS (TTLS) you must obtain a client certificate to allow authentication.
Certificates are managed from either Internet Explorer or the Microsoft Windows Control Panel.
Windows XP and Windows 2000: When a client certificate is obtained, do not enable strong private key protection. If you enable strong private key protection for a certificate, you need to enter an access password for the certificate every time this certificate is used. You must disable strong private key protection for the certificate if you configure the service for TLS or TTLS authentication. Otherwise, the 802.1X service fails authentication because there is no logged in user to provide the required password.
Notes about Smart Cards
After a Smart Card is installed, the certificate is automatically installed on your computer and is chosen from the personal certificate store and root certificate store.
Step 1: Obtain a certificate
To allow TLS authentication, you need a valid client certificate in the local repository for the logged-in user's account. You also need a trusted CA certificate in the root store.
The following information provides two methods for obtaining a certificate:
If you do not know how to obtain a user certificate from the CA, consult your administrator for the procedure.
To install the CA on the local machine:
Use Microsoft Management Console (MMC) to verify that the CA is installed in the machine store.
NOTE: If this is the first certificate you have obtained, the CA first asks you if it should install a trusted CA certificate in the root store. This is not a trusted CA certificate. The name on the certificate is that of the host of the CA. Click Yes. You need this certificate for both TLS and TTLS.
To configure a profile with WPA authentication with WEP or TKIP encryption that uses TLS authentication:
NOTE: Obtain and install a client certificate, See Step 1 or consult your administrator.
Specify the certificate used by Intel(R) PROSet/Wireless
Name Description Static Password On connection, enter the user credentials. One-time password (OTP) Obtain the password from a hardware token device. PIN (Soft Token) Obtain the password from a soft token program.